CVE-2024-24795

MEDIUM6.3EPSS 1.1%

Apache HTTP Server: HTTP Response Splitting in multiple modules

發布日:2024/4/4修改日:2025/5/20
也稱為:ALPINE-CVE-2024-24795BIT-apache-2024-24795

描述

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.

受影響套件(4)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

參考連結(13)